Analysis

  • max time kernel
    132s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    25/06/2024, 02:25

General

  • Target

    0c0b546f4f1568051a2d4975d9f141b0_JaffaCakes118.html

  • Size

    254B

  • MD5

    0c0b546f4f1568051a2d4975d9f141b0

  • SHA1

    2eb46d7463458744dd58c8ed105cb12b62c6f3ef

  • SHA256

    8688cc024715d61f7f8a3fdc19b8aaaecf1f86fa65de055138dda172b3849fde

  • SHA512

    a9edd7287952b8959bf6717e5da194b38e3c4a7d0727a5c719150dab6f7c4e9986aa32255f3ec19fd8995706379d93be22d41a2c9afd71875a6d0596c9bf8f76

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0c0b546f4f1568051a2d4975d9f141b0_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2420
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2420 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2140

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          56729768cb527506f77e18be5d7da66e

          SHA1

          4e91af96bc17db1ea02829e53a20a62167027a76

          SHA256

          2e6592c29961b8d6c32e4ea1d4f56bcbbdf7a0af41dd925cc87dbf2be7443ec2

          SHA512

          666b8f5884e6500b47a503dcde8ce44c3726b509e9775b73445aa8124e9b4a72eabbe0389d1c03b01895dc561e1b508fc7165240f5f897776932f352cf246593

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          3f82febeee9666d8f762fa1b282c6917

          SHA1

          0a4485d8d9817ec883dfe1e88a3b8119096680db

          SHA256

          70c5c7197f2317aa8a663a40ea1f9941a7c3d9c58a6c034d084b76b0e2840587

          SHA512

          d1db702a858edae6bbf08531e7fda8be909037507937e998dbb6bf4ce0aa10364f4ddd99d3005b57ecf607c92a84477c8e4084638a3e438a32ed86572285760b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          480202f52e0adf4a894247423dbde073

          SHA1

          16a282c059613d08d58bcc23099b3f69e206008c

          SHA256

          a6671f523ff55a49a61ced33403289ece952e95d637e29a7d399368b771f6879

          SHA512

          1d64e3bce1e2441d61b5c99184c46276cee72201268c5112bba180e47bba465dc76dbd0475a31eadb060469a648f81c6647d4261dc1cbfc59d58d66a93bb146f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          22b059903936d80cc2acc430cbc442cf

          SHA1

          d89f5c84a061a30b7ccaaba6a31ac694eb2bab8c

          SHA256

          20d2c615417810dc3af91ace976e09bb431ad11c591dc7208c2cfd0f3fa587ef

          SHA512

          91417e1021da292f96fb44a743da6647f75011abd179950086a331ea379249e7b46e7ca3bf6ba6be07ae416cc31e1df79e596c5f96fa20afa00728af50aea51c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          a6e7a08619ef95560f9cd41e05f67bfa

          SHA1

          826ccea9fbd897104b73b066ae240f8cc3430e2d

          SHA256

          51b3015ab04f4166b86ebf5905a961302ea3b5f7f2f36db72cd87a82afcebda2

          SHA512

          68ef061479678a4bcaae97a78e34bfe00ab1dc1397253026567fb0cfb93b37038f90a6f3245eed6798804c1861ad4fd0069302d091c5426fc55a0bb9bbc26a05

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          044414b9e17a6a78790301a656e563cb

          SHA1

          7262561afc67761ff6d3dd90be7ca517340ab43f

          SHA256

          728200eabde24f8418f10773cd0712c36478a468fa53f81d0c1f7ae1d9d9b97b

          SHA512

          57d99cb8506a839baf4bd7b2c3c21c6348e5098c8654448b2327c20df116e7c2adcc0bd6c0c3a605da80b5896c81ff9a1502af40d1f77632653c21f35f4bb886

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          71e1b44ae928e26c545db3dc68f23986

          SHA1

          f6a767441cf38e98d76d66cbd24e5d7f4bdd51d4

          SHA256

          4f34e446ff0d229fd665985f9f99516106e666645b4820c682db56923042110b

          SHA512

          5727f413e2d52b6c3a4b85dc4a5772fd0ef8ed5dcf38ab3e4f17f82ac3fce30daa012a4027f30e89f0dc1dbe8c3030a7e9f29e7bba9ab76ef75330529d5b181a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          ce649cf83bf695ae77af360ab51f7e29

          SHA1

          2cae89e17604e81f8dfd29977a9ebdad6959fd9e

          SHA256

          c58b35e6353b9ddb24ed59f22a3f4c57b4a74646a1f0c261448eae9867b43bc7

          SHA512

          c9a5435a8cc917dd3d664691757b0f042109c5949dcb34ef120fedfc0d3819b84f4a2ef19e0afa5d73f8959718f819ea3828a4ce216c588a086963881979dd1b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d03523fce39d129fc8c74a45967bc95c

          SHA1

          2d45ebad488e815c99075047ed622d681a920c8a

          SHA256

          33f5cc91e345b642f862e4464306188312df24205b3686c79f0b47c610d4f68d

          SHA512

          806986902a88c3810b68f50fe07e77b923f1ba006b432860f9526e4d15030c51199f40ad8cf01457e93451cdf0980362f74875815e142ea740a371427c729828

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          abccdbdcd67bb305e1a2e6b390e1e46a

          SHA1

          3dbeb787851720883a553673ecbf87fed1e2c1ba

          SHA256

          a1899fb608ae8f55470b01e56f90652e7ddbd66e6841385ea89b81053274bd0f

          SHA512

          c40f850b92412ab3ba72403c6a6cd9464b5dd1992cfaa7c4e21f4d304a79728d7dec0a424bea549f889b3e6e00790eb00e366d2e00b33a5660ed755b722499f8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          16cf586c415f2685297405dad0c3cfa0

          SHA1

          325edd6fca06cacae96f63ed9bd4f7a8a61a00b8

          SHA256

          b66905a66a2eb87a80ce4637b425765b02a6f4d86234a5bc26379c27eef2f3f2

          SHA512

          c06bea3b97b63a7ed8c0827e0003eed3808506a5e9a0266f881fe4e5461c717dfe146f122025c40d3aa9235014d3a1cd73cf6c45480b421a0eb656eb73cd89e5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6ab247baccc4027d3d066a623d8f38a0

          SHA1

          5aac15d7f27eda58d3f5f9b4ef50846c90dd1a44

          SHA256

          b50556fbe5faaecc26b47add75f806e8bfeea26fb9f3133d732e6859c424aeed

          SHA512

          c94c804217a79a90c16b29b970f49beec467d8c33bc811384c4ea2af5670fcc85d4f0b62081cbc60bd09f83d108899aa97be027747e6da460c4f200ea53ff7dd

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          7a26347d31c78d2cc8e187c1013762f1

          SHA1

          41a207204622ce6319ca96991bc791da241c484f

          SHA256

          a36dfc60d3d07862e494f43a017b1527ede17c5d85660348facabef4c977415d

          SHA512

          76ce97cb276786fb1ce5c6269075d4fc6d5e65027270c2c324c850a650ae24976df3b825f0f6b3ae0716e18d4f30cbefa62284cb02b8b9d6a8755d7db401319b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d60192f3855ec8da63cde587c3fc3012

          SHA1

          155d3e2c128a1d43d163ec1a1a5b9eafeaa872ae

          SHA256

          333c18dd3964acffd923a9578ace570fb5c7a03844e013b5139812137c7c5557

          SHA512

          0b8863c41fc71735df32aa980f94587cdf7472655b530e18bfc6552d3cce28bbdaa12bf3790ec3c36af30bb5a3c3162d66fc3a71386b092c1a8cd46c9e1de8dd

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          a310f5055878e1bf492939ef479d44b0

          SHA1

          9f866038bed52aaa3e5a87dca8d310d50872f63c

          SHA256

          0607e391066d596147aa7a455bf2b929f45557b688b704eff15e0e4c23e9585c

          SHA512

          daf4f70d672e9ac2dccd65cc86f8c24a181cd1bb93a1fff7810f938ac03dd9aab1acecd3ea0977ddc9fd3f4ab25be1cabbe9e94fce6b16195b594ce6d589587f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          2e64c80e3d475291c084a7d842b0a322

          SHA1

          8d9b6e084a062f693b2d1ba7021ceda342f3fad9

          SHA256

          a430e081011342670aa2086d2a5a2458d07de47862af9ce94cee50e232a63f01

          SHA512

          ea1504d66a3728546eac9933df4c669905a754d68e837ba7c546c181976644fad5db14b88932d011ceb67a99b3a1b18fbef839015f78be53cccb02b67e163869

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          2370ff1eeae313e7e5dc74ed5d63b309

          SHA1

          c8f02175d46d38b273f8d13d15cef60487ec4f79

          SHA256

          60b251a9d11799dfe61b463de8de8107b1e269d46a25b9521fc4d662dad9d7f1

          SHA512

          26b6d4dea6c00d211d172f95442fcb3198e111585a06f1ddb850beb9082e0424156c104ba4eaea5b157ac7526b6e8aae79203561265e9effb98fdc1b43848ff4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          551719755fa906f820305adbae6605a4

          SHA1

          75ee0565083ae8baa3a3bfc323158dfc1038de84

          SHA256

          28881e51880b2d76048a0873d649951b43c942965f5c95e8195417a57a144d33

          SHA512

          19b170d32647115a9c62a534ef85cb63849fb63793f50826bb86705eb7fcc33a81d17e09138efc6c150bf0dfee7b10a2876a7c21e8ba5fae657a4e9dc35b6693

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          db86eab38d8d3b486bb32d9c43b7577a

          SHA1

          00db3f17694f7623140de0d8104c73882cc6f119

          SHA256

          ab6384de35eca21bfa156f7db5811410f104fdc14a9a98399329a534552f02b9

          SHA512

          1502767adb34a9bb7ab1c05f4a9c7d00dde20e803067403e25f2b1f7bb540a9408448dab6a9cca1c00e935e720c244209a15502350f544a2a1a13d0234a0d334

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          86ef564f108f03b4743ccca13ef12303

          SHA1

          3b90ee87bc067931a2f3c86cd6fd77eae208d5ec

          SHA256

          3d6fcb9f85fef6bca4421b6935e42a8490fdd9be413e72125de08e9ce8c5c585

          SHA512

          47688b5ad32e4fc3b9fbc09c5ed35bd8a46d713bce2a80c6b995364a6f19b436d699c0b27a8dffc0adc5b42f77183299e85959a9be926b9077033d0618ad6e5d

        • C:\Users\Admin\AppData\Local\Temp\Cab2F2D.tmp

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\Local\Temp\Tar2FD1.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b